It was discovered that ppp incorrectly handled certain options files. A local attacker could possibly use this issue to escalate privileges.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ppp", "binary_version": "2.4.5-5.1ubuntu2.1" }, { "binary_name": "ppp-dev", "binary_version": "2.4.5-5.1ubuntu2.1" } ] }
{ "ecosystem": "Ubuntu:14.04:LTS", "cves": [ { "id": "CVE-2014-3158", "severity": [ { "type": "Ubuntu", "score": "medium" } ] } ] }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2429-1.json"